Logging recipient?

[Ugo Bellavance]

>-----Message d'origine-----
>De : Jørn-Morten Innselset [mailto:jorn-morten.innselset at BANETELE.COM]
>Envoyé : 31 mars, 2004 17:41
>À : MAILSCANNER at JISCMAIL.AC.UK
>Objet : Re: Logging recipient?
>
>
>That's already in there, and all it gives is the recipient 
>_domain_, not the 
>user part:
>
>Message 9366 from 194.19.1.186 (ramarshall at voyager.net) to 
>kjentfolk.no is 
>spam, SpamAssassin (score=28.018, required 6, autolearn=spam, 
>BANG_EXERCISE 
>2.94, BANG_GUARANTEE 1.00, BAYES_99 5.40, CLICK_BELOW_CAPS 0.50, 
>GUARANTEED_STUFF 2.30

You can find the recipient with the message id, at least with sendmail.  Not easy in a script, but probably feasible.

When I get a spam, I have one log entry with the sender (as usual), one for the spam alert, one with the recipient (as usual).

I think the message ID is included in a virus log entry as well

hth

Ugo

>
>
>And the virus scanners (f-prot and clamav) doesn't log the 
>recipient at all.
>
>jmi
>
>
>----- Original Message ----- 
>From: "Ugo Bellavance" <ugob at CAMO-ROUTE.COM>
>To: <MAILSCANNER at JISCMAIL.AC.UK>
>Sent: Thursday, April 01, 2004 12:13 AM
>Subject: Re: Logging recipient?
>
>
>
>>-----Message d'origine-----
>>De : Jørn-Morten Innselset [mailto:jorn-morten.innselset at BANETELE.COM]
>>Envoyé : 31 mars, 2004 16:54
>>À : MAILSCANNER at JISCMAIL.AC.UK
>>Objet : Re: Logging recipient?
>>
>>
>>The recipient - I would like to extract a report on how many
>>messages I have
>>blocked per user. Does this info appear in your maillog by default?
>>
>
>Check this setting in MailScanner.conf
>
># Do you want all spam to be logged? Useful if you want to gather
># spam statistics from your logs, but can increase the system 
>load quite
># a bit if you get a lot of spam.
>Log Spam = yes
>
>I think virus activity is logged by default.
>
>Ugo
>
>>jmi
>>
>>
>>----- Original Message ----- 
>>From: "Mike Kercher" <mike at CAMAROSS.NET>
>>To: <MAILSCANNER at JISCMAIL.AC.UK>
>>Sent: Wednesday, March 31, 2004 10:10 PM
>>Subject: Re: Logging recipient?
>>
>>
>>
>>Sender or recipient?  I wouldn't trust the sender these days!
>>
>>My systems log all that info...may take a little digging to get to it
>>though.
>>
>>Mike
>>
>>
>>> -----Original Message-----
>>> From: MailScanner mailing list
>>> [mailto:MAILSCANNER at JISCMAIL.AC.UK] On Behalf Of Jørn-Morten
>>Innselset
>>> Sent: Wednesday, March 31, 2004 1:50 PM
>>> To: MAILSCANNER at JISCMAIL.AC.UK
>>> Subject: Logging recipient?
>>>
>>> Is there an easy way to enable logging of the full email
>>> address of infected/spam messages to syslog?
>>>
>>> jmi
>>>
>>
>